Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: IMD/pnMi/6mDERtKxknZDXTUDgKGxWYycVGk6sZE07M=
Subject key identifier: F2:56:C2:7D:9D:90:9D:CE:27:F4:60:86:05:8C:3B:8C:E8:AE:7B:7B
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 01D3
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 01D1
Signing time: Mon 28 Apr 2025 04:25:48 +0000
Manifest this update: Mon 28 Apr 2025 04:25:47 +0000
Manifest next update: Wed 30 Apr 2025 04:25:47 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: 7sQyEqHvMdjzfUTCKSXfckBoCMyA7PwFmHWUHkWoLHQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Apr 28 04:25:47 2025 GMT
Not After : Apr 30 04:25:47 2025 GMT
Subject: CN=680f034b-d6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:59:1a:4a:19:42:63:9c:8b:ba:83:2f:83:
27:71:8b:d7:ce:67:ba:ff:cc:68:a4:cf:89:e7:5e:
1f:0f:bd:6c:39:84:ff:16:8c:f9:ef:ef:73:b6:db:
a1:45:9a:de:74:92:5e:23:64:50:e4:da:a9:29:1e:
22:35:31:fe:99:5e:42:15:6a:f9:06:69:9a:28:7a:
9b:5f:c2:e9:26:6c:7a:8a:f5:25:6e:84:1f:0e:97:
8d:06:4b:a8:5a:9c:78:f0:7b:f8:38:31:73:c7:94:
b9:16:d8:db:7b:e4:f3:fb:c7:e5:ae:71:47:a3:72:
09:da:c3:e5:bf:0e:66:9a:57:1c:fc:7f:77:79:a5:
f9:88:70:ca:ac:f0:d9:f1:5e:fe:61:7e:11:37:34:
7b:35:39:1e:90:6d:a4:f9:36:53:0a:d7:31:6e:3e:
66:9b:82:29:61:49:27:15:c9:5b:07:55:0e:af:35:
50:49:e2:2b:e7:06:27:70:ac:cf:61:37:2d:fc:83:
7b:34:b0:b1:8e:1c:81:7a:3a:8c:0b:9e:7a:92:4b:
39:0b:db:d6:14:d0:ea:38:84:56:43:83:b4:7c:af:
4f:d2:14:df:f6:e2:43:a7:e8:91:63:12:3c:76:32:
bc:79:6b:3a:77:9e:ee:36:46:1a:e2:62:b1:de:dc:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:C2:7D:9D:90:9D:CE:27:F4:60:86:05:8C:3B:8C:E8:AE:7B:7B
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:c7:94:5f:67:c7:13:71:ba:66:a6:8e:db:c1:e7:a8:90:
d6:6b:af:a1:14:4f:2f:1b:e3:68:59:a9:8c:89:07:f5:14:4f:
87:4a:59:8f:6f:9b:e7:e3:99:cf:db:73:d1:5f:51:2c:87:f9:
53:8f:70:5a:df:73:bd:ad:d3:77:26:8b:ba:9a:25:a3:77:2f:
e8:a5:ef:d5:b1:09:1b:de:05:4b:52:40:b2:98:ea:49:4c:3c:
43:1b:d5:0a:5d:44:50:b4:f7:70:d6:15:64:e8:b1:ab:3e:ac:
03:78:f0:de:02:9e:bf:1f:d8:3d:f9:ca:77:77:4b:45:c8:ec:
7c:2a:c0:2b:4f:08:af:e4:c9:06:9f:9e:b8:1c:9d:fb:8e:ef:
7b:08:40:5a:ef:b0:2f:eb:82:ef:75:70:52:6d:57:3c:af:fd:
5e:93:63:96:84:d4:2f:21:6e:a3:9f:88:97:20:d5:8e:df:c0:
45:45:29:06:a7:30:a3:c8:6a:e9:6b:65:9b:1b:e1:45:c4:d6:
de:37:29:6c:32:27:a8:46:6c:44:77:66:e5:b2:a9:93:cb:a9:
e1:36:57:fa:20:a1:2b:0a:6f:f3:44:42:6b:93:cd:94:70:ca:
bf:fa:4c:22:2c:bb:89:ac:67:55:60:30:c2:27:f2:28:37:d6:
82:25:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:34 2025 by rpki-client on console.sobornost.net